VDH EHR Security Analyst/Technical Support Analyst 3

About the role

The EHR Security Analyst supports security, access, and user provisioning for the Electronic Health Record (EHR) environment and provides Tier 1 support to end users. The role involves technical and functional support for EHR security configuration, user access, security roles, authentication, auditing, and access‑related troubleshooting. The analyst collaborates with clinical, operational, IT, privacy, compliance, and application support teams to ensure appropriate access based on job responsibilities and organizational policies, and works closely with the EHR Application team, ISO team, and HIPAA compliance officer to maintain HIPAA‑compliant security controls.

Responsibilities

• Map and maintain EHR position definitions, including Millenium positions, preferences, and OHPAC security groups.
• Review and process EHR access requests in accordance with established policies, procedures, organizational standards, and role‑based access requirements.
• Create, modify, and terminate user access based on approved requests and established processes.
• Monitor and enforce appropriate use of EHR access control positions and policies, ensuring users have the correct level of access for their roles and job functions.
• Work with the EHR Security Officer, IT technical team, support team, and EHR core team to define and automate user provisioning and off‑boarding procedures.
• Monitor and conduct internal security audits of the EHR application to identify and mitigate risks or vulnerabilities.
• Develop and maintain security policies, procedures, and guidelines related to the application in partnership with the EHR Security Officer.
• Define and complete security documentation and downtime procedures with the ISO office and EHR core team according to security guidelines.
• Respond to and investigate security incidents related to the EHR application, ensuring timely resolution and proper reporting to stakeholders.
• Collaborate with implementation and optimization teams to integrate security measures into new features, updates, and third‑party applications.
• Stay informed about emerging security threats, technologies, and best practices related to EHR systems.
• Recommend improvements and optimizations to the EHR security environment based on industry trends and emerging threats.
• Monitor user behavior using tools such as P2Sentinel to identify trends and possible incidents.
• Assist the EHR Security Officer and core team with internal and external audits.
• Participate in Cerner/OHPAC upgrades, security patches, and system maintenance to ensure ongoing security.
• Contribute to the domain strategy for the EHR application.
• Maintain up‑to‑date knowledge of security updates, best practices, and regulatory changes.

Required Experience

• Three plus years of IT experience.
• Three plus years of healthcare IT experience.
• Strong understanding of Millenium and OHPAC security positions.
• Strong understanding of EHR systems.
• Understanding of HIPAA, HITECH, meaningful use, and other healthcare security regulations.
• Experience with Active Directory (AD), single sign‑on (SSO), multi‑factor authentication (MFA), and identity management solutions.
• Strong analytical, problem‑solving, and troubleshooting skills related to Cerner/OHPAC security and access issues.
• Excellent communication and collaboration skills for working with IT teams, compliance officers, and end users.
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.
• Knowledge of Discern and ccl.

Skill Matrix

• Understanding of Millenium and OHPAC security positions – Required (3 years)
• Healthcare IT experience – Required (3 years)
• IT experience – Required (3 years)
• Strong understanding of EHR systems, specifically OH/Cerner – Highly desired (3 years)
• Understanding of HIPAA, HITECH, meaningful use and other healthcare security regulations – Highly desired (3 years)
• Experience with Active Directory (AD), SSO, MFA, and identity management solutions – Highly desired (3 months)
• Strong analytical, problem‑solving, and troubleshooting skills related to Cerner/OHPAC security and access issues – Required (3 years)
• Excellent communication and collaboration skills – Required (3 years)
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security – Highly desired (3 years)
• Knowledge of Discern and ccl – Required (3 years)